The trending security breach takes one to a suspicious warning and further a blog that asks users to ‘to confirm their password or other verification information’.
eware, as Metamask security breach rumour surfaces on Twitter but hey, hold on why no one is talking about it.!? And more, specifically, no ‘authentic’ source like Metamask’s website has addressed it.
This could possibly be because the rumour itself is a part of a bigger conspiracy. We say so, because the rumour tweets have been posted by handles that replicate OpenSea, Yuga Labs’ official twitter handles.
MetaMask has just announced that a critical security issue which allows attackers to withdraw all of your NFT assets has been detected. We recommend all Yuga collection holders to read MetaMask's article and update your MetaMask: https://t.co/K7Aou0Xu85
— Yuga Labs (@yugaIabs) September 2, 2022
But, we dug a little further and found a warning notification on the blog site that is attached with these ‘fishy tweets’. The notification reads that the domain of a fake blog is now on the MetaMask domain warning list and that ‘MetaMask has restricted access to the site’.
The notification in a ‘fore-warning’ tone said that there are several reasons sites can appear on the wallet’s warning list, and the warning list forms from other widely used industry lists. ‘Such reasons can include known fraud or security risks, such as domains that test positive on the Ethereum Phishing Detector’, reads the notification.
When we further click on the website mentioned in the warning notice, it gets redirected to a fake blog. Yes, a fake blog on Metamask. The fake blog asks users to immediately update MetaMask to alleviate the issue and secure their funds.
Further, the blog also asks users to connect their MetaMask and approve all verification requests one by one. Users are also requested in the blog to confirm their password or other verification information. Note that this verification can risk users’ funds.
However, no authentic source has talked about the whole rumour further points out to suspicious phishing scam from rumour-mongers. The aforementioned warning and fake blog could cause metamask users to panic and blindly follow the instructions and thus, helping scammers win! Hence, caution and patience is recommended.